Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft
File:                     5xSoFJfIF3hoy7TNszjD72zp6VM.mft (raw, json)
Hash identifier:          3gVA3zYuatmPPgGC2/uElbNJ6rRND9Zg6se1uYT6GBA=
Subject key identifier:   0D:43:ED:9A:90:1C:D8:69:90:CC:BF:94:F2:3E:8A:4D:C3:8C:17:E5
Authority key identifier: E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53
Certificate issuer:       /CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953
Certificate serial:       0AED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft
Manifest number:          0ADE
Signing time:             Tue 24 Mar 2026 19:13:31 +0000
Manifest this update:     Tue 24 Mar 2026 19:13:30 +0000
Manifest next update:     Tue 31 Mar 2026 19:13:30 +0000
Files and hashes:         1: 5xSoFJfIF3hoy7TNszjD72zp6VM.crl (hash: 2p+YubT72p1lKObp3TW/VVLdqCJYmjcJASAKPamAoGY=)
                          2: CDD96B60B78911EF9BD3EF80C4F9AE02.roa (hash: +vuV01yjXB1+RoW7WbOmTfoAon5Ua6XhR4wfKoKtImw=)
                          3: 9085F6C0B78911EFB9994180C4F9AE02.roa (hash: u8WkqF58twBf7V4x+gVZYpgUq+L7j/Jz1XNkEqJ+tfM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl
                          rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:13:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2797 (0xaed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172C8D, serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953
        Validity
            Not Before: Mar 24 19:13:30 2026 GMT
            Not After : Mar 31 19:13:30 2026 GMT
        Subject: CN=69c2e25b-9fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e4:f5:2b:01:17:92:8d:3f:83:47:65:68:32:
                    d6:a2:1b:5d:9a:93:20:93:7f:51:cf:8c:4a:07:80:
                    4c:55:2b:19:b2:a0:48:5d:8c:90:67:86:7b:89:73:
                    cc:e3:90:1e:2f:a0:55:05:84:8d:ef:f3:8f:53:0e:
                    50:e7:05:0a:09:37:f8:bf:04:ae:2a:37:d0:f2:d4:
                    79:3a:33:b0:c4:d1:06:ea:77:7d:62:fd:6f:ce:9e:
                    cc:ba:c4:62:12:16:d5:9c:80:85:d3:cc:e8:64:5b:
                    9b:c3:f1:7c:45:fa:2e:53:46:b1:75:93:3d:31:e7:
                    e0:e9:da:b4:df:21:a5:8c:d5:54:90:a0:2a:9c:ea:
                    df:3e:b8:b0:96:5a:c7:42:95:38:33:79:54:43:8e:
                    09:b1:83:a7:9e:02:5b:36:b9:0a:69:22:b7:79:43:
                    40:3e:ca:fa:1b:45:82:e1:9a:63:5e:e7:6b:b5:fd:
                    74:22:e9:b5:79:f6:69:32:cd:a0:2f:30:0b:07:80:
                    a7:86:d9:bf:d4:05:91:37:42:c2:3d:ec:1b:56:f5:
                    88:09:12:97:d5:75:cb:27:f4:0a:d0:5a:a2:7a:da:
                    5e:2b:38:dd:68:7a:f0:34:a7:28:a2:d7:d7:79:1e:
                    ac:4b:cd:b0:31:23:0d:0e:fc:98:6d:f4:c6:25:8f:
                    dc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:43:ED:9A:90:1C:D8:69:90:CC:BF:94:F2:3E:8A:4D:C3:8C:17:E5
            X509v3 Authority Key Identifier:
                keyid:E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:84:be:2d:74:4d:64:c8:18:69:1d:f6:ae:c0:20:fd:9d:76:
         b8:f3:58:7d:22:3d:b8:2b:4e:28:5b:55:3b:b7:a8:55:30:a5:
         49:d9:9e:fe:54:a2:2c:5b:b0:e9:26:7a:3f:4b:92:50:03:4f:
         05:9e:b9:bb:32:96:3a:e3:a9:41:1a:38:b3:66:9b:1e:8e:70:
         26:73:79:86:f3:02:df:da:5d:f1:3a:0e:e9:6d:65:5f:db:39:
         70:0d:fb:69:d6:ab:ac:ee:74:e1:df:f5:a6:e5:23:26:2c:a2:
         b7:17:37:64:bc:f6:e5:1d:37:80:bb:7d:2e:cd:38:9d:88:91:
         df:2b:04:6a:d5:4f:f2:5d:ce:46:2f:01:f0:34:2e:6e:33:f1:
         40:bb:e8:6e:12:99:d0:47:02:a6:77:07:da:8d:c2:45:35:f9:
         2c:a6:e8:e5:79:61:5d:10:69:f9:47:11:37:b2:f3:ff:41:2d:
         30:49:19:c3:74:5a:b3:b4:5e:d9:8f:c9:97:81:2d:c8:ad:e2:
         07:14:85:dc:b4:8a:6e:6a:70:03:7d:ed:0c:71:dc:64:c2:f5:
         99:a4:a0:3f:cf:55:61:22:fd:83:a1:cf:07:39:7c:1c:83:66:
         d4:c4:5d:08:ff:b1:9b:13:71:0b:11:31:34:92:26:b2:a8:20:
         ae:f9:36:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:11:08 2026 by rpki-client